Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/Irk32qOe1LUs9iQ5nGl7F6Q6G4Q.roa
File: Irk32qOe1LUs9iQ5nGl7F6Q6G4Q.roa (raw, json)
Hash identifier: ztaRpp+QxP2F0s2GVQ7cOp4JBbIvujHiluHqBlVMdG4=
Subject key identifier: 22:B9:37:DA:A3:9E:D4:B5:2C:F6:24:39:9C:69:7B:17:A4:3A:1B:84
Certificate issuer: /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial: 018480E778A0B10917F9C5BD9FEEB1948891
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/Irk32qOe1LUs9iQ5nGl7F6Q6G4Q.roa
Signing time: Wed 16 Nov 2022 14:46:04 +0000
ROA not before: Wed 16 Nov 2022 14:46:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51236
IP address blocks: 5.180.57.0/24 maxlen: 24
5.180.58.0/23 maxlen: 23
2a0c:3d00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:e7:78:a0:b1:09:17:f9:c5:bd:9f:ee:b1:94:88:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
Validity
Not Before: Nov 16 14:46:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22b937daa39ed4b52cf624399c697b17a43a1b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:e9:cc:06:b5:59:c4:78:ae:25:f6:62:b2:
5a:f9:f9:59:e9:f5:bf:80:fa:e5:21:6f:db:98:2f:
39:54:13:9d:9d:20:4a:2a:55:e4:5a:0b:dc:c6:64:
30:45:44:dc:b2:93:94:47:4f:90:b7:45:b5:58:3e:
43:f1:11:13:31:6e:f0:24:fa:35:ba:a9:bb:c8:a0:
03:cd:b3:e7:88:66:3f:4f:8a:d2:af:40:00:69:c2:
89:f5:88:4f:89:62:1d:7a:05:5a:bd:c7:26:a2:bc:
73:73:ef:f4:14:9f:62:d3:38:1b:7a:63:c0:e3:07:
99:75:1b:34:16:f2:d4:0d:2d:20:c8:61:27:b7:eb:
03:45:f1:73:b3:50:bd:97:d2:ff:85:ea:1d:93:dd:
86:ac:37:ff:a2:11:25:d7:fa:f2:d2:ba:bd:f3:60:
4f:cf:7c:4b:cc:ec:94:e7:39:6f:dc:fe:63:bc:5d:
c3:83:c3:95:b1:ba:c7:01:d3:d8:eb:41:18:e2:a7:
78:c6:45:56:c2:8b:ee:77:53:57:8f:4f:6c:5b:05:
1d:75:fd:a3:be:85:31:7d:0b:3a:89:7d:66:f8:59:
8b:bc:59:65:b7:7d:2b:bb:79:5a:7b:3e:2c:9b:3e:
d2:3b:12:ed:69:17:f9:66:0f:a8:7b:15:a8:a4:91:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B9:37:DA:A3:9E:D4:B5:2C:F6:24:39:9C:69:7B:17:A4:3A:1B:84
X509v3 Authority Key Identifier:
keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/Irk32qOe1LUs9iQ5nGl7F6Q6G4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.57.0-5.180.59.255
IPv6:
2a0c:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
5e:5d:a5:4e:2b:da:9d:d2:d9:9b:7b:2c:fd:84:c4:93:c4:ed:
0a:f2:f1:b5:e4:28:c5:63:a0:7d:fa:5d:6e:bd:7e:d3:4c:b9:
b9:77:1b:af:78:df:eb:44:dc:00:9e:e2:ce:c6:f2:dc:dc:a3:
93:24:d3:e5:9d:db:51:03:51:99:73:0d:31:46:c9:b2:f6:8b:
96:58:ba:46:ef:21:99:5d:36:bf:8c:d7:17:ef:de:a7:8d:34:
2e:31:c1:c9:97:44:c9:d1:7f:ad:94:54:1f:04:af:67:5f:ce:
ed:2a:97:6b:5a:e7:28:25:5a:55:e8:fe:21:b3:07:1a:31:a3:
ac:66:7d:e5:66:44:96:30:a3:e2:a4:5e:dc:5f:35:8c:70:c1:
4a:90:4e:70:06:77:5f:b5:ef:7c:a6:d2:da:ac:7c:3a:f1:25:
89:b5:35:b4:d2:78:9e:3e:7b:c0:34:0c:10:98:5e:70:f3:59:
7c:c9:85:e5:00:a9:75:14:fc:59:d7:50:58:4f:21:1e:94:f5:
2c:22:a9:70:36:39:5e:90:34:8e:96:95:8a:e4:dc:bb:31:a9:
77:49:fe:93:86:0d:01:bd:d4:3b:19:8b:92:81:d5:89:cf:de:
e5:5c:5a:9c:ec:d4:07:67:da:33:04:e9:74:38:84:08:41:44:
21:02:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:03 2024 by rpki-client on console-ams.rpki-client.org